Comment by graemep

Its a lot lower risk, its still not great IMO. Email is really not designed for it, and it trains people to use links to login.